1/ Budget enforcement

Set daily, weekly, or monthly spending limits with reset windows, and any request over the cap fails with a 403 so a single runaway script can't burn through the budget.

API key budgets layer independently on top of member budgets.